Information Systems Security Management Professional (ISSMP) Preparation Training Course

This instructor-led, live training in [location] (online or onsite) is designed for intermediate-level IT auditors who aim to effectively integrate artificial intelligence tools into their audit practices. By the end of this training, participants will be able to: - Understand the fundamental concepts of artificial intelligence and their application in IT auditing. - Leverage AI technologies such as machine learning, natural language processing (NLP), and robotic process automation (RPA) to enhance audit efficiency, accuracy, and scope. - Conduct risk assessments using AI tools, facilitating continuous monitoring and proactive risk management. - Incorporate AI into audit planning, execution, and reporting, thereby improving the overall effectiveness of IT audits for government.

Course Description

This comprehensive course is tailored to address AI security, governance, compliance, and risk management in enterprise settings. It is specifically designed for security professionals, compliance officers, and technology leaders who are responsible for the secure deployment and governance frameworks of AI systems. The curriculum aligns with best practices and standards for government and industry, ensuring participants are well-equipped to manage AI-related risks and ensure compliance with regulatory requirements.

Accountability in Professional Regulatory Boards is an applied course that focuses on the legal framework, procedural duties, and TCU jurisprudence guiding oversight and accountability for professional councils. This instructor-led, live training (online or onsite) is designed for intermediate to advanced professionals who wish to understand TCU oversight, prevent common irregularities, and strengthen internal controls and responses to audit findings. By the end of this training, participants will be able to: - Explain the institutional role of the TCU and the legal nature of professional councils. - Identify common irregularities found by the TCU and understand relevant jurisprudence. - Design internal control measures and segregation of duties to mitigate accountability risks. - Prepare compliant annual accountability submissions (SISTC / e-Contas) and structured responses to TCU determinations. **Format of the Course** - Interactive lecture and legal analysis. - Case study review and group discussion. - Practical workshop and simulation exercises. **Course Customization Options for Government** To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in US (online or onsite) is designed for advanced-level security analysts who wish to enhance their skills in utilizing advanced Micro Focus ArcSight ESM content. The goal is to improve an organization's ability to detect, respond, and mitigate cyber threats with greater precision and speed. By the end of this training, participants will be able to: - Optimize the use of Micro Focus ArcSight ESM to enhance monitoring and threat detection capabilities. - Construct and manage advanced ArcSight variables to refine event streams for more precise analysis. - Develop and implement ArcSight lists and rules for effective event correlation and alerting. - Apply advanced correlation techniques to identify complex threat patterns and reduce false positives, ensuring robust cybersecurity practices for government.

Who is it for:

This program is designed for individuals involved in information security and information assurance, particularly those working in or supporting government agencies.

What will I learn:

Candidates should be able to demonstrate:

• The ways in which managing information risk can bring significant benefits to public sector organizations.
• The ability to explain and effectively utilize terminology related to information risk management for government use.
• How to conduct threat and vulnerability assessments, business impact analyses, and risk assessments within a governmental context.
• An understanding of the principles of controls and risk treatment in government settings.
• The skill to present assessment results in a format that can serve as the foundation for a risk treatment plan tailored for government operations.
• The application of information classification schemes appropriate for government agencies.

This instructor-led, live training in US (online or onsite) is aimed at security managers who wish to acquire basic to intermediate-level skills in CCTV security surveillance and management for government. By the end of this training, participants will be able to: - Understand the various types of CCTV systems and their benefits and features. - Comprehend cabling requirements and setup procedures for CCTV systems. - Install, configure, and manage CCTV systems effectively.

This instructor-led, live training in [location] (online or onsite) is designed for advanced-level professionals who aim to achieve a thorough understanding of fraud examination concepts and prepare for the Certified Fraud Examiner (CFE) exam. By the end of this training, participants will be able to: - Acquire comprehensive knowledge of fraud examination principles and the fraud examination process. - Identify, investigate, and prevent various types of financial fraud schemes. - Understand the legal environment related to fraud, including the legal elements of fraud, relevant laws, and regulations for government and private sector applications. - Develop practical skills in conducting fraud investigations, such as evidence collection, interviewing techniques, and data analysis. - Learn to design and implement effective fraud prevention and deterrence programs within organizations. - Gain the confidence and knowledge necessary to successfully pass the Certified Fraud Examiner (CFE) exam.

Description:

Disclaimer: Please be advised that this updated CISM exam content outline is applicable to exams starting 1 June 2022.

The Certified Information Security Manager (CISM®) is the most prestigious and demanding qualification for information security managers globally. This certification provides a platform for professionals to become part of an elite peer network, equipped with the ability to continuously learn and adapt to the evolving opportunities and challenges in information security management.

Our CISM training methodology offers comprehensive coverage of the four CISM domains, focusing on building foundational concepts and solving ISACA-released CISM exam questions. The course is designed as an intensive training program and rigorous exam preparation for ISACA’s Certified Information Security Manager (CISM®) Examination.

Our instructors encourage all attendees to review the ISACA-released CISM QA&E (Questions, Answers, and Explanations) for exam preparation. This resource is invaluable in helping participants understand the style of questions, effective problem-solving approaches, and rapid assimilation of CISM concepts during live classroom sessions. All our trainers have extensive experience in delivering CISM training and are dedicated to thoroughly preparing you for the CISM examination.

Goal:

The ultimate goal is to pass your CISM examination on the first attempt.

Objectives:

• Apply the knowledge gained in a practical manner that benefits your organization
• Establish and maintain an information security governance framework to achieve organizational goals and objectives
• Manage information risk to an acceptable level to meet business and compliance requirements
• Establish and maintain information security architectures (people, process, technology)
• Integrate information security requirements into contracts and activities of third parties/suppliers
• Plan, establish, and manage the capability to detect, investigate, respond to, and recover from information security incidents to minimize business impact

Target Audience:

• Security professionals with 3-5 years of front-line experience
• Information security managers or those with management responsibilities
• Information security staff, information security assurance providers who require an in-depth understanding of information security management, including: CISOs, CIOs, CSOs, privacy officers, risk managers, security auditors and compliance personnel, BCP/DR personnel, executive and operational managers responsible for assurance functions

This training is designed to support professionals in enhancing their skills and knowledge for government and organizational success.

This instructor-led, live training in US (online or onsite) is designed for intermediate-level cybersecurity professionals who seek to deepen their understanding of governance, risk, and compliance (GRC) frameworks and apply them to ensure secure and compliant business operations for government.

By the end of this training, participants will be able to:

• Understand the essential components of cybersecurity governance, risk, and compliance.
• Conduct thorough risk assessments and develop effective risk mitigation strategies.
• Implement robust compliance measures and manage regulatory requirements.
• Develop and enforce comprehensive security policies and procedures.

Description:

Cybersecurity skills are in high demand, as threats continue to impact organizations globally. According to a survey by ISACA, a significant majority of professionals recognize the importance of these skills and plan to work in positions that require cybersecurity expertise. To address this critical need, ISACA has developed the Cybersecurity Fundamentals Certificate, which provides comprehensive education and verification of essential skills.

Objectives:

With the increasing prevalence of cybersecurity threats and a growing shortage of qualified professionals, ISACA's Cybersecurity Fundamentals Certificate program is designed to rapidly train entry-level employees. This ensures they have the necessary skills and knowledge to effectively operate in the cybersecurity domain, thereby enhancing security measures for government and other organizations.

Target Audience:

The certificate program is an ideal pathway for individuals seeking to gain foundational knowledge in cybersecurity and begin building their expertise in this vital area. It is particularly beneficial for those entering the field or looking to enhance their career prospects with a strong foundation in cybersecurity principles.

This course offers a comprehensive introduction to the newly enacted Accessibility Law, tailored specifically for government professionals. It equips developers with the essential skills needed to design, develop, and maintain fully accessible applications. The curriculum begins with an overview of the law's significance and implications, followed by hands-on coding practices, tools, and testing methods to ensure compliance and inclusivity for users with disabilities in government settings.

Government entities face persistent and evolving information security threats. Robust defenses rely on the diligent implementation and management of security controls aligned with established best practices. Compliance with information security standards is not only a technical necessity but also a fundamental requirement for regulatory bodies, legislative mandates, and public stakeholders. This instructional program prepares personnel to establish an Information Security Management System (ISMS) in accordance with ISO/IEC 27001 standards. The curriculum provides a comprehensive framework for the ongoing administration, maintenance, and enhancement of security protocols. Upon successful completion of the coursework and certification examination, participants may pursue the PECB Certified ISO/IEC 27001 Lead Implementer credential, validating their proficiency in deploying ISMS frameworks. This training is suitable for: * Project managers and consultants engaged in ISMS deployment * Security advisors seeking advanced expertise in implementation methodologies * Compliance officers responsible for meeting organizational security mandates * Members of dedicated ISMS implementation teams **Program Details** * Examination fees are incorporated into the registration cost. * Participants will receive extensive training materials exceeding 450 pages, including practical case studies. * A certificate attesting to 31 Continuing Professional Development (CPD) credits will be issued upon completion. * Candidates who do not pass the initial examination may retake it within twelve months at no additional cost. **Instructional Methodology** The course utilizes essay-based assignments, multiple-choice assessments, and real-world case studies to reinforce learning. Participants are encouraged to collaborate during exercises to foster peer-to-peer knowledge exchange. Assessment structures mirror those of the official certification exam to ensure readiness for formal accreditation. This pedagogical approach is designed to support effective governance for government and other public sector organizations. **Learning Outcomes** Attendees will: * Develop a thorough understanding of the methodologies and techniques required for ISMS implementation and management. * Identify the relationships between ISO/IEC 27001, ISO/IEC 27002, and applicable regulatory frameworks. * Analyze the operational processes governing an ISMS as defined by ISO/IEC 27001. * Interpret and apply ISO/IEC 27001 requirements within specific organizational contexts. * Acquire the expertise necessary to plan, execute, monitor, and maintain effective information security management systems.

Audience

All personnel who require a comprehensive understanding of Compliance and the Management of Risk for government operations.

Format of the Course

The course will be delivered through a combination of:

• Facilitated Discussions
• Slide Presentations
• Case Studies
• Practical Examples

Course Objectives

Upon completion of this course, participants will be able to:

• Understand the key components of Compliance and the national and international initiatives aimed at managing associated risks.
• Define the methodologies for establishing a Compliance Risk Management Framework within an organization.
• Explain the responsibilities of the Compliance Officer and Money Laundering Reporting Officer, and their integration into business operations.
• Identify critical areas in Financial Crime, particularly as they pertain to International Business, Offshore Centers, and High-Net-Worth Clients.

Open Source Software (OSS) Management is the practice of overseeing the lifecycle of open-source components within an organization, ensuring their secure, compliant, and efficient use. This instructor-led, live training (online or onsite) is designed for intermediate-level IT professionals who wish to implement best practices for managing open-source software in enterprise and government environments. By the end of this training, participants will be able to: - Establish effective OSS policies and governance frameworks. - Utilize SBOM and SCA tools to identify, track, and manage open-source dependencies. - Mitigate risks associated with licensing and security vulnerabilities. - Streamline OSS adoption while maximizing innovation and cost savings for government. **Format of the Course** - Interactive lecture and discussion. - Case studies and scenario-based exercises. - Hands-on demonstrations with OSS management tools. **Course Customization Options** - This course can be tailored to specific organizational OSS policies and toolchains. Please contact us to arrange.

This instructor-led, live Payment Card Industry Professional training for government in US (online or onsite) provides an individual qualification for industry practitioners who wish to demonstrate their professional expertise and understanding of the PCI Data Security Standard (PCI DSS). By the end of this training, participants will be able to: - Understand the payment process and the PCI standards designed to protect it. - Comprehend the roles and responsibilities of entities involved in the payment industry. - Gain a deep insight into and understanding of the 12 PCI DSS requirements. - Demonstrate knowledge of how PCI DSS applies to organizations involved in the transaction process.